Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 23 replies
  • Subscribers 2 subscribers
  • Views 25528 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

[INFO-115] Snort restart today

thomas_brewster
Anyone else noticing multiple units getting snort restarts today (2014-11-17).
We've had three different UTMs report multiple snort restarts this morning.

[INFO-115] Snort not running - restarted
Snort not running - restarted

Also noticing some new IPS hits on one of these units;
(smtp) Attempted response buffer overflow: ???? chars

Regards,
Thomas


This thread was automatically locked due to age.
Parents
  • 0
    Hundreds of these events and a basic shutdown of internet access for my users.  The culprit seems to be: 2014:11:18-14:06:19 UTM snort[16922]: FATAL ERROR: The dynamic detection library "/usr/lib/snort/so_rules//misc.so" version 1.0 compiled with dynamic engine library version 2.1 isn't compatible with the current dynamic engine library "/usr/lib/snort_dynamicengine/libsf_engine.so" version 2.4.

    My only choice is to disable IPS for the time being.
Reply
  • 0
    Hundreds of these events and a basic shutdown of internet access for my users.  The culprit seems to be: 2014:11:18-14:06:19 UTM snort[16922]: FATAL ERROR: The dynamic detection library "/usr/lib/snort/so_rules//misc.so" version 1.0 compiled with dynamic engine library version 2.1 isn't compatible with the current dynamic engine library "/usr/lib/snort_dynamicengine/libsf_engine.so" version 2.4.

    My only choice is to disable IPS for the time being.
Children
No Data